Sécurité IT 2026-08-20

Niveau Critique — 78/100 — 2026-08-20

Journée « Critique » : 29 sujets classés, 3 des 10 premiers signalés comme activement exploités, 3 failles ajoutées au catalogue des vulnérabilités exploitées de la CISA. En tête : MLflow Server-Side Request Forgery Vulnerability (73/100).

1. MLflow Server-Side Request Forgery Vulnerability — 73/100 (CVE-2026-64849)
2. TrueConf Server Code Injection Vulnerability — 66/100 (CVE-2026-72530)
3. TrueConf Server Missing Authentication for Critical Function Vulnerability — 65/100 (CVE-2026-72529)
4. CVE-2026-17000 — IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to execute arbitrary code due to… — 38/100 (CVE-2026-17000)
5. CVE-2026-17006 — IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to execute arbitrary code due to… — 38/100 (CVE-2026-17006)
6. CVE-2026-17024 — IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to execute arbitrary code due to… — 38/100 (CVE-2026-17024)
7. CVE-2026-17138 — IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to execute arbitrary code due to… — 38/100 (CVE-2026-17138)
8. CVE-2026-17436 — IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to execute arbitrary code due to… — 38/100 (CVE-2026-17436)
9. CVE-2026-18832 — IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to execute arbitrary code due to… — 38/100 (CVE-2026-18832)
10. CVE-2026-19437 — IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to execute arbitrary code due to… — 38/100 (CVE-2026-19437)